Welcome to Cardlio ("we," "our," or "us"), operated by Addon Shareware Pvt Ltd. ("Legal Entity"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application, website, and backend services.
1. Information We Collect & Device Permissions
We collect information that identifies or relates to you:
- Account Data: Phone Number, Email Address (via OTP or Google Sign-In), Name, and Account Type.
- Visiting Card Information: Full Name, Job Title, Company, Contact details, Social media profile links, Work links, and uploaded photos/logos.
- Device Permissions (Camera & Photo Library Access): We request access to your Camera and Photo Library solely to allow you to capture or upload photos and logos for your digital cards. We do not access or read your private photos without your explicit action.
- Saved Contacts: Digital cards and contact details you save or receive.
- Payment Details: Processed securely via Razorpay. We do not store credit card/banking details on our servers.
- Technical & Usage Data: Card visit counts, action clicks, IP address, device identifiers, and timestamps.
2. How We Use Your Information
- To create, host, render, and share your digital visiting cards.
- To authenticate your account securely via OTP or Google OAuth.
- To process premium plan payments via Razorpay.
- To provide card visit analytics and optimize app performance.
- To provide technical and customer support.
3. Third-Party Services, Analytics & Data Sharing
We do not sell your personal data. We share data only with essential service providers:
- Google OAuth: For single sign-in authentication.
- Razorpay: Secure payment processing gateway.
- SMS Gateway Providers: To send verification OTPs.
- Developer Analytics & Crash Reporting (e.g., Firebase Analytics, Google Analytics, Crashlytics): Used for crash diagnosis, app diagnostics, performance monitoring, and usage insights to improve app stability.
4. Data Security
We enforce technical measures including HTTPS/TLS 1.2+ encryption for data in transit and JWT authentication for secure requests.
5. Account Deletion & Data Retention (App Store Guideline 5.1.1(v))
In-App Deletion Path: Users can delete their account via Profile / Settings -> Delete Account.
Once confirmed, all user cards, uploaded assets (photos/logos), and profile data are immediately and permanently removed from active databases.
Alternatively, you can request account deletion by emailing us at info@addonshareware.com.
6. Children's Privacy
Our app is not intended for children under 13 years of age.
7. Changes to This Privacy Policy
We may update this policy periodically. We will notify users by revising the 'Last Updated' date and/or displaying an in-app notice for significant changes.
8. Contact Us & Legal Entity Identification